Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: ffapGJdATf17b+GybZj8vj3mwsSZYliAaoGGhlQfJiM=
Subject key identifier: 81:96:B2:B8:38:5E:87:F4:45:6A:9E:C8:7B:23:48:03:93:BE:30:14
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019A4F2B2C8669C85B848AE65860342F9790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:20 +0000
Manifest this update: Tue 04 Nov 2025 14:00:20 +0000
Manifest next update: Wed 05 Nov 2025 14:00:20 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: CDX59C8Ly732X38UTjGLhvhY0WVBGBeffGRzQRVzoQA=)
2: Mbm6QXqJoPSY8lmJ2uuYnoixdss.roa (hash: YVUXdFTCHChTHodePJ+65GQKTip7VafzN3LWZ67guNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2c:86:69:c8:5b:84:8a:e6:58:60:34:2f:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Nov 4 14:00:20 2025 GMT
Not After : Nov 5 14:00:20 2025 GMT
Subject: CN=8196b2b8385e87f4456a9ec87b23480393be3014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:39:24:29:c1:8a:58:61:aa:f2:5e:a0:75:
86:23:f3:ac:59:fb:a7:d9:d1:2b:6c:e4:ce:0c:fa:
2a:f0:6f:54:36:fd:8d:34:b2:5b:91:9a:bb:66:f5:
e7:fa:56:03:bf:0d:57:7a:f0:45:fc:7f:58:ea:7a:
ff:db:2c:c9:95:1c:c5:5d:fc:ea:88:29:b8:1c:a0:
d5:8f:af:81:2d:22:2a:22:b3:d2:6d:b7:4e:43:98:
5a:17:31:0f:a5:99:42:f0:6e:6a:1c:38:ba:5b:e5:
08:c7:20:23:3a:d9:09:ea:2c:3b:d9:94:5e:b8:6b:
01:6f:d0:06:8b:ee:aa:1d:9c:cb:31:57:76:05:a6:
91:f4:b4:ba:f8:ba:39:e9:9b:75:13:c1:f3:53:46:
94:61:8e:9c:6b:be:2e:4b:8a:b1:f6:6d:ad:e8:51:
95:e0:cf:fb:72:fb:2f:4f:5b:8b:f3:dd:09:94:3e:
b2:ed:e6:c0:89:49:8f:37:f1:4c:42:0c:e1:3a:2d:
57:66:16:af:08:ae:e0:f6:e6:55:3a:ca:87:e2:fb:
a3:38:e5:a1:26:8c:e5:cc:68:90:eb:5c:76:ea:28:
58:2c:cb:9e:8a:a8:7a:ad:78:ee:14:a8:2d:84:83:
f2:d6:d7:a8:29:8a:c3:10:56:22:61:ad:ce:c3:45:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:B2:B8:38:5E:87:F4:45:6A:9E:C8:7B:23:48:03:93:BE:30:14
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:68:90:da:23:4a:2d:3b:e3:8e:86:b2:2a:d2:e9:39:19:
07:ee:40:7c:e9:4b:f3:77:d9:0f:4a:ab:43:7d:58:a8:02:38:
1a:0b:3f:de:39:d6:8a:30:8e:09:94:9c:ef:93:c2:5d:b2:82:
70:17:55:f5:1f:c3:f4:4f:21:fd:14:1d:1b:36:43:22:46:b6:
6d:ad:7e:62:63:7b:06:e2:71:1d:99:5e:dd:66:be:08:17:96:
18:70:e0:1e:38:50:fe:67:a2:97:fd:a8:fe:fb:08:a9:69:f4:
d4:8f:b8:26:a0:3e:91:93:39:50:95:c5:22:d4:c0:47:f4:7f:
45:b9:81:b2:96:c2:67:66:aa:0f:2c:8d:5b:d6:2c:78:e3:ac:
85:86:65:1c:83:26:eb:85:ec:98:21:3b:a0:80:80:a5:9f:3f:
05:03:4a:9c:d5:ed:85:1a:8b:7c:41:6a:b8:82:4b:2c:a3:3e:
9a:05:68:eb:cf:20:ad:a3:cc:b6:99:70:5c:36:db:1f:1e:99:
ed:c8:f4:93:21:57:0e:5e:f5:f8:c4:c4:1e:8b:9e:4a:e2:0e:
95:ff:d1:0e:48:6e:12:9b:cd:e9:58:38:55:96:f6:02:7d:32:
32:a7:22:57:c6:69:99:ef:68:4c:8d:b8:dc:b2:e1:c8:a0:44:
3f:b2:ef:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKyyGachbhIrmWGA0L5eQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl
ZDFkNDYwHhcNMjUxMTA0MTQwMDIwWhcNMjUxMTA1MTQwMDIwWjAzMTEwLwYDVQQD
Eyg4MTk2YjJiODM4NWU4N2Y0NDU2YTllYzg3YjIzNDgwMzkzYmUzMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SQ5JCnBilhhqvJeoHWGI/OsWfun
2dErbOTODPoq8G9UNv2NNLJbkZq7ZvXn+lYDvw1XevBF/H9Y6nr/2yzJlRzFXfzq
iCm4HKDVj6+BLSIqIrPSbbdOQ5haFzEPpZlC8G5qHDi6W+UIxyAjOtkJ6iw72ZRe
uGsBb9AGi+6qHZzLMVd2BaaR9LS6+Lo56Zt1E8HzU0aUYY6ca74uS4qx9m2t6FGV
4M/7cvsvT1uL890JlD6y7ebAiUmPN/FMQgzhOi1XZhavCK7g9uZVOsqH4vujOOWh
JozlzGiQ61x26ihYLMueiqh6rXjuFKgthIPy1teoKYrDEFYiYa3Ow0WHBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGWsrg4Xof0RWqeyHsjSAOTvjAUMB8GA1UdIwQY
MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt
NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm
LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9tokNoj
Si07446GsirS6TkZB+5AfOlL83fZD0qrQ31YqAI4Ggs/3jnWijCOCZSc75PCXbKC
cBdV9R/D9E8h/RQdGzZDIka2ba1+YmN7BuJxHZle3Wa+CBeWGHDgHjhQ/meil/2o
/vsIqWn01I+4JqA+kZM5UJXFItTAR/R/RbmBspbCZ2aqDyyNW9YseOOshYZlHIMm
64XsmCE7oICApZ8/BQNKnNXthRqLfEFquIJLLKM+mgVo688graPMtplwXDbbHx6Z
7cj0kyFXDl71+MTEHoueSuIOlf/RDkhuEpvN6Vg4VZb2An0yMqciV8Zpme9oTI24
3LLhyKBEP7LvAw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:16 2025 by rpki-client